Export extended Exchange Admin Audit Logs to a csv file
Create a powershell script file and save it as C:\ExchangeLogs\Exchange.PS1
For daily logs:
$a = Search-AdminAuditLog -StartDate (Get-Date).AddDays(-1)
$a | select CmdletName,ObjectModified,CmdletParameters,ModifiedProperties,Caller,ExternalAccess,Succeeded,Error,RunDate | Export-Csv "C:\ExchangeLogs\ExtendedAuditLogs_$(get-date -f yyyy-MM-dd).csv" -NoTypeInformation
For hourly logs:
$a = Search-AdminAuditLog -StartDate